Wallet & Crypto Security Engineer
All-in-one Philippine e-wallet and cryptocurrency exchange combining crypto trading with payments, bills, QR checkout, mobile load, and remittances.
Funding history
About Coins.ph
Coins.ph is a regulated digital-asset and payments platform operating under the Coins.ph brand. Its services include buying, selling, and holding cryptocurrency; peso wallets; bill payments; mobile load; QR payments; money transfers; and remittances. The current user agreement identifies Betur, Inc. and DCPay Philippines, Inc. as the entities doing business as coins.ph.
Skills
About the Role
Lead and maintain security architecture for cryptocurrency wallets, manage private-key and MPC security policies, harden public-chain nodes and RPC interfaces, and audit external smart contract interactions to prevent vulnerabilities and asset security risks.
Requirements
- Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain, or a related major
- 1-3 years of work experience in Web3 or blockchain security
- Basic cryptography principles
- Public and private key management
- Encrypted storage
- FIPS 140-2/3 standards
- Cold and hot wallet architecture
- MPC
- TSS threshold signatures
- On-chain multi-signature mechanisms
- Permission control
- Disaster recovery drills
- Risk investigation
- BTC, ETH, and TRON public-chain logic
- Public-chain node operation
- RPC interface security hardening
- On-chain attack prevention
- Smart contract security vulnerabilities
- Contract interaction security audits
- Risk assessment
- Problem rectification
- Digital asset and private key security
Responsibilities
- Lead and maintain security architecture for cold, warm, and hot cryptocurrency wallets
- Standardize private key generation, storage, usage, backup, and destruction
- Ensure wallet systems comply with FIPS 140-2/3 standards
- Manage MPC wallet and multi-signature smart contract security policies
- Configure permissions and isolation for MPC wallets and multi-signature smart contracts
- Conduct disaster recovery drills
- Operate and maintain BTC, ETH, and Tron full nodes and RPC interfaces
- Harden public-chain nodes and RPC interfaces
- Defend against node hijacking, Sybil attacks, unauthorized access, and other security threats
- Audit business-system interactions with external smart contracts
- Identify and prevent approval phishing and reentrancy attacks
- Complete contract interaction security audits
- Conduct risk assessments and problem rectification